As of June 1, 2024, Vestige Digital Investigations is part of ArcherHall, a leading digital forensics, 
e-discovery, and cybersecurity service provider. The Vestige team that you know and trust will
continue to serve you at ArcherHall. Our expanded team, capabilities, and infrastructure will allow
us to serve you and your clients even better.

Device Usage Reconstruction

Jump To

Device Usage Reconstruction

Leaning on artifact analysis, Device Usage Reconstruction is the analysis of the manner in which a device (computer, server, mobile device, etc) has been used.  A wide range of questions can be answered through device usage analysis, such as:

  • Was this device used to commit a specific act
  • Was the device in a specific geography (GPS)
  • What network(s) has the device been attached to (wired, wireless, cellular and Bluetooth)
  • Was the user working during work hours or spending time on non-work related activities
  • What peripherals may have been connected to the device
  • What software has been installed, uninstalled and/or used
  • Were activities undertaken to thwart an investigation (i.e. anti-forensic techniques, data destruction, etc.)
  • And much more

Look to Vestige for Device Usage Reconstruction Services.